Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,522CVE records
2,874Published, last 7 days
1,726In CISA KEV
1,421Critical, last 30 days
5,599Analysed
20:16 UTCLast NVD sync
Filters Show:
22 results. Solarwinds Web Help Desk.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-28323 | Critical | 9.8 |  Solarwinds Web Help Desk | Improper authentication | — | — | 1.0% | Jul 30, 2026 |
| CVE-2026-28299 | High | 7.5 | Solarwinds Web Help Desk | Allocation without limits | — | — | 0.71% | Jun 2, 2026 |
| CVE-2025-40554 | Critical | 9.8 | Solarwinds Web Help Desk | CWE-1390 | — | — | 61% | Jan 28, 2026 |
| CVE-2025-40553 | Critical | 9.8 | Solarwinds Web Help Desk | Deserialization of untrusted data | — | — | 68% | Jan 28, 2026 |
| CVE-2025-40552 | Critical | 9.8 | Solarwinds Web Help Desk | CWE-1390 | — | — | 52% | Jan 28, 2026 |
| CVE-2025-40551 | Critical | 9.8 | Solarwinds Web Help Desk | Deserialization of untrusted data | Listed | Confirmed | 84% | Jan 28, 2026 |
| CVE-2025-40537 | High | 7.5 | Solarwinds Web Help Desk | Hard-coded credentials | — | — | 0.59% | Jan 28, 2026 |
| CVE-2025-40536 | Critical | 9.8 | Solarwinds Web Help Desk | CWE-693 | Listed | Confirmed | 74% | Jan 28, 2026 |
| CVE-2025-26399 | Critical | 9.8 | Solarwinds Web Help Desk | Deserialization of untrusted data | Listed · RW | Confirmed | 90% | Sep 23, 2025 |
| CVE-2024-28988 | Critical | 9.8 | Solarwinds Web Help Desk | Deserialization of untrusted data | — | — | 39% | Sep 1, 2025 |
| CVE-2025-26400 | Medium | 6.5 | Solarwinds Web Help Desk | XML external entity (XXE) | — | — | 0.27% | Jul 29, 2025 |
| CVE-2024-28989 | Medium | 5.5 | Solarwinds Web Help Desk | CWE-321 | — | — | 0.29% | Feb 11, 2025 |
| CVE-2024-45709 | Medium | 5.5 | Solarwinds Web Help Desk | Path traversal | — | — | 0.50% | Dec 10, 2024 |
| CVE-2024-28987 | Critical | 9.1 | Solarwinds Web Help Desk | Hard-coded credentials | Listed | Confirmed | 93% | Aug 21, 2024 |
| CVE-2024-28986 | Critical | 9.8 | Solarwinds Web Help Desk | Deserialization of untrusted data | Listed | Confirmed | 85% | Aug 13, 2024 |
| CVE-2021-35251 | Medium | 5.3 | Solarwinds Web Help Desk | Error message information leak | — | — | 0.95% | Mar 10, 2022 |
| CVE-2021-35243 | High | 7.5 | Solarwinds Web Help Desk | CWE-749 | — | — | 0.90% | Dec 23, 2021 |
| CVE-2021-32076 | Medium | 5.3 | Solarwinds Web Help Desk | Authentication bypass by spoofing | — | — | 1.2% | Aug 26, 2021 |
| CVE-2019-16961 | Medium | 5.4 | Solarwinds Web Help Desk | Cross-site scripting | — | 2 refs | 1.5% | Jan 15, 2021 |
| CVE-2019-16954 | Medium | 5.4 | Solarwinds Web Help Desk | Cross-site scripting | — | 2 refs | 1.3% | Jan 6, 2021 |
